Automatic Configuration Scheme of Network Security Protection Based on Configuration Management Database
Lin Ni, Tong Sicheng, Zhang Shuai, Qian Yang · 2024
With the rapid development of information technology, the increasing of network security incidents makes the security operation and maintenance more and more difficult. Aiming at the problems in the process of network security operation and maintenance, such as weak cooperative configuration ability of equipment, non-uniform configuration technical standard, lack of security operation and maintenance personnel, and many repetitive operation and maintenance work, this paper puts forward a solution of automatic configuration of network security protection based on configuration management data base, and develops a configuration system for promoting automatic disposition of network security events. The scheme uses API connection to realize the collection, processing and utilization of asset information, standardizes the technical standards of equipment configuration of each brand, analyzes the relevance of network equipment, excavates the cause of events, and assists to realize automatic configuration. According to the analysis of practical application effect, the scheme shows good expandability and maintainability, which not only improves the running efficiency of the system, but also ensures the stability of the system.